Security Testing Tutorials

Run a security tool against a single change in a sandbox before it merges, so every finding traces back to that change.

Tutorial	Description
ZAP	Scan one change with a ZAP API scan run as a Signadot Job, catch a SQL injection, fix it and scan again.
Falco	Scope Falco rules to sandbox pods, catch a dependency phoning home, and fail a Signadot Job on Falco's alerts.

For how security tools reach a sandbox, and how to keep active scans contained, see Runtime security testing.